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The Challenge Of Air Safety .. 


Anyone who flies planes, operates planes, makes planes, rides in 
planes, or is interested in country's welfare has a stake in air safety. 


By J. Carlton Ward Jr. 


Chairman, Board of Governors, Flight Safety Foundation 


The title of this article—“The Chal- 
leng of Air Safety”—has a number of 
hidden meanings which are not ap- 
parent on the surface. Before going 
into the challenge itself, it would be 
well to ask a few questions: 


Some Questions 

» To whom is the challenge directed? 
Is it to the pilot—the management of 
airlines—the manufacturers of airplanes 
—to the passenger—or to the Gov- 
ernment? 

» Why is there such a challenge? Air 
safety would seem to be as vital to 
aviation as breathing is to staying alive. 
Are we challenging the need of air 
safety, or the way the need is being 
met by the people responsible for air 
safety? Or are we challenging the 


methods by which air accidents are be- 
ing combatted? 

» Is the challenge on technical grounds, 
or is it directed toward human factors 
involved in air safety? Is it a challenge 
of procedures, or of attitudes? 


The Answer 

It is possible to answer all these 
questions with a single, all-inclusive 
answer: Air safety is everybody’s busi- 
ness, and everything mentioned above 
is included in the problem. If you fly 
airplanes, operate airplanes, make air- 
planes, ride in airplanes—or if you are 
simply interested in the welfare of our 
country—you have a stake in air safety. 

There will never be too much safety 
in the air. If there were sufficient air 
safety—or if we were doing everything 


we can do—there would be no chal. 
lenge. We wouldn’t be talking about 
it. 

Aviation has come of age, and we 
can afford to face facts. In order to 
do this, we must review the facts. We 
must know exactly what our aims are 
in developing those things which pro- 
mote safety, and combatting things that 
retard safety. 


The Old Attitude 

Let’s go back a bit. Years ago when 
the flying business was more or less in 
its infancy, there was a hush-hush at- 
titude toward air safety. People who 
flew airplanes or operated them did not 
like to have people talk about safety. 
It scared them away from the planes. 


When a plane crashed, the idea was 
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to cover everything up—smear paint 
on tiie insignia, so nobody would know 
what airplane had the accident; say 
nothing about the reasons for the acci- 
dent, on the ground that talking about 
it would increase fear. 

We all know today that this was poor 
public relations. It was not even good 
common sense. We have outgrown a 
good deal of this early attitude of stick- 
ing our heads in the sand—but not 
entirely. 

Air safety has gone through an evo- 
lution that is very much like the public 
attitude toward certain diseases—such 
as cancer and syphillis. Years ago news- 
papers would not print the cause of 
death of people who died from cancer. 
They were afraid it would arouse fear 
in the public mind. 


The New Attitude 

Today that has changed, because the 
public and the medical profession both 
know the best way to stop cancer is 
to know about it—to spread informa- 
tion as to its causes, and what can be 
done to arrest its progress, so that those 
afflicted may take the earliest possible 
steps to arrest the disease. 

There is a lesson for the aviation in- 
dustry in the history of the public at- 
titude toward cancer. 

Mystery breeds anxiety and suspicion 
and retards progress. 

We are willing to discuss safety now 
because certain phases of flying have 
become safer than other common ac- 
tivities like riding in a car. Airline 
flying is of the same order of magnitude 
as the safety of railroads and a great 
deal safer than driving a car. U. S. 
international operations are about 40 
times safer than car-driving, based on 
current fatality statistics. 


The Greatest Challenge 
Our greatest challenge is to obtain 


s Everyone's Business 


a perfect safety record. Perhaps we 
will attain that point of perfection 
where there are no accidents. But if 
we keep our sights high enough, we 
will keep on improving even if we 
never reach perfection. 

wet us consider, for example, the 
human factor in flight safety—the chal- 
lenge to the people who manufacture, 
operate, maintain and fly airplanes, as 
well as those who ride in them. 

Starting with the last, let me quote 
from General Harold Harris: 

“Anxiety is still a predominant part 
of the human equation of air trans- 
portation. It will continue to be as 
long as an accident can happen. Anxi- 
ety is inherent in the human reaction to 
air transportation whether the reaction 
be conscious or unconscious. Anxiety 
never disappears in a human being in 
an airplane—it merely remains dor- 
mant when there is no cause to arouse 


it. Our challenge is to keep it forever 


dormant.” 


At first the challenge was directed 
primarily for the passenger. But since 
the unfortunate accidents at Newark 
airport, the anxiety has extended to 
those who live around airports. 


Anxiety and Safety 

One of the popular ways of com- 
batting this anxiety has been to quote 
figures as I just did, showing how 
many times safer an airplane is than 
an automobile, or comparing passenger 
miles flown without accident to records 
of other forms of transportation. This 
in itself is a plain admission that we 
know this anxiety exists, and we are 
trying to reduce it or allay it. 

But reducing anxiety does not in- 
crease safety, any more than keeping 
the word “cancer” out of the news- 
papers cured the disease. 

We are all sure that flying will be- 


come one of the safest forms of trans- 
portation, but we won’t make it safer 
by putting our heads in the sand— 
either individually within segments of 
the industry, or collectively as an in- 
dustry. 

The question boils down to this: 
Not, “How can we convince people 
that flight safety is improved?” But, 
“How can we improve flight safety?” 


Good Business 

Obviously, it is good business to be 
on friendly terms with the people who 
ride in airplanes, and who support air 
transportation. We know that even as 
our safety rate improves, the increasing 
activity and frequency of flights will 
cause a greater number of accidents— 
and steps must be taken to keep this 
in proper public perspective. Automo- 
biles can go on killing people at an 
ever-increasing death-rate without cre- 
ating as much sense of calamity in the 
public mind as two or three major air- 
plane accidents in close succession. 

But our interest goes deeper than 
this. The cost of accidents to airline 
management, and to manufacturers 
who have an indirect but no less vital 
interest, are such that management can 
no longer sustain the position: “Can 
we afford to do this for increased safe- 
ty?” Rather, they must ask: “Can we 
afford not to do it?” 


No Panacea 

There is no panacea for airplane ac- 
cidents—no sure way of preventing 
them. 

What I want to discuss is the vari- 
ety of human relationships which the 
Flight Safety Foundation has found in 
its investigations that materially effect 
the prevention of accidents. 

If maximum flight safety is to be at- 
tained, these human problems must be 
recognized, evaluated, and dealt with 
constructively. 

First and foremost, there is a man’s 
attitude toward his job. For example, 


(Continued on Page 14) 





Vol. 23, No. 10 


The 
Air Line 
Pilot 


October, 1954 


Entered as Second Class Matter at the 
Post Office at Chicago, Ill. Copyright; 
1954, by Air Line Pilots Association, 


International. 








Clarence N. Sayen 
President 


Jerome E. Wood 
First Vice-President 


Kay McMurray 
Executive Vice-President 


F. A. Spencer 
Secretary 
Roger Don Rae 
Treasurer 
REGIONAL VICE PRESIDENTS 
W. WA. Mastand..........0.0.:500.:... Region | 
BiB, I cette eens Region II 
ei RI iss isin cthcincs tel Region Ill 
Ls TR UID sess ccssctoessderine Region IV 
Si, Fs I cseresonctioccsistcxcenss Region V 


Larry Cates 
Legislative Representative 





Published Monthly by the Air Line Pilots 
Association, International, Affiliated with 
A. F. of L. Publication offices: 55th 
Street and Cicero Avenue, Chicago 38, 
Illinois. 


Advertising appearing in this magazine 
cannot be construed as being an en- 
dorsement by the Air Line Pilots As- 
sociation or the Air Line Pilots. 


Annual Subscription, $2.50 


Ed Modes, Editor 
EB 66 





Octoser, 1954 





Pace 3 











Airborne Radar--A Forward Step 


UAL has announced it will ae 150 planes with airborne radar next spring. Signifi- 


cantly, too, it will be designe 


United Air Lines has broken the ice 
on airborne radar—to pilots, one of the 
most welcome cockpit additions in 
many a year; to the industry, a step 
that should pay rich dividends in in- 
creased safety and reliability. Dollar- 
wise, United will put $4,000,000 into 
the radar program. One hundred fifty 
of UAL’s four-engined and twin-en- 
gined planes will be radar-equipped. 

By its action, UAL becomes the first 
air line to adopt airborne radar specifi- 
cally designed for commercial use, ac- 
cording to J. R. Cunningham, the com- 
pany’s director of communication. He 
points out that the equipment would 
not be a modification of any military 
type radar but, rather, will be the prod- 
uct of research and development di- 
rected entirely toward radar use in air 
line operations. 


A Forward Step 
There is no dispute that airborne 
radar looms as a significant forward 
step in the application of latest scien- 
tific devices in air line operation. 


W. A. Patterson, President of UAL, 
says: “I regard radar for air line use as 
one of the great technological advances 
of the last 10 years.” 


Speaking for the Air Line Pilots As- 
sociation, C. N. Sayen, ALPA presi- 
dent, expressed warm praise for the 
program being instituted by United. 

“We are confident,” he said, “this 
decision to purchase airborne radar will 
reflect in increased schedule reliability, 
safety, and passenger comfort, and will 
ultimately benefit the entire air trans- 
port industry. The inclusion of airborne 
radar in the cockpit will help the pilot, 
by visual reference to a radar scope, 
to determine the location of thunder- 
storm cells, heavy precipitation, turbu- 
lence and icing areas and will help to 
insure proper terrain clearance. To- 
morrow’s pilot, with the aid of this 
navigation device, will be better able to 
analyze the weather, plan his flight ac- 
cordingly while en route, and thus 
avoid many of the potential hazards 
associated with flying in thunderstorm 
areas.” 


International in Scope 
United, Sayen said, is taking the lead 
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By Ed Modes 
Editor, The Air Line Pilot 


in meeting an air transport problem 
that is not only national, but also in- 
ternational in scope. 

Speaking as president of the world 
pilot organization, the International 
Federation of Air Line Pilots Associa- 
tions, Sayen recalled that the Interna- 
tional Federation, at its 9th Conference 
in Zurich, Switzerland, in April, 1954, 
reviewed the problem and adopted a 
resolution pressing for the inclusion of 
airborne radar in all transport aircraft. 
The IFALPA resolution states: “The 
Federation, collectively and through 
member organizations, insists strongly 
that airborne radar adapted to the 
specific purpose of providing the pilot 
with information to aid in (1) turbu- 
lence circumnavigation, (2) evasion of 
icing areas, and (3) terrain clearance, 
be installed in commercial aircraft as 
soon as possible.” 

“Airborne radar,” said Mr. Sayen, “‘is 
one of the greatest technological ad- 
vances in recent years in the air trans- 
port field. We hope that other carriers 
will shortly follow United Air Lines 
and make airborne radar available to 
their pilots.” 


Weather Mapping Use 
Specifically, United will use C-band 
radar for weather mapping. This 


means that pilots using the radar will | 


be able to peer into storm fronts and 
select corridors through which they can 
fly dependably and with the assurance 
of maximum passenger comfort. The 
result will be the avoidance of turbu- 
lent areas and the elimination of 
lengthy detours around storms. 

Using an experimental C-band radar 
developed by the Radio Corporation of 
America, United last summer conduct- 
ed four months of flight tests which, 
air line officials said, clearly demon- 
strated the superiority of the C-band 
frequency for weather mapping (re- 
ported at the 1954 ALPA Air Safety 
Forum and in June, 1954, Air Line 
Pilot). Altogether, 40 technical and 
operational flights totalling 133 air 
hours were completed in the area 
around Denver where a series of thun- 
derstorms provided ample opportunity 
to gauge the potentials of airborne 
radar. 


specifically for air line use, not a military modification. 


"Sir Echo" Tests 

In a DC-3 Cargoliner dubbed “Sir 
Echo,” United’s radar evaluation team 
sampled virtually every type of weather 
except hurricanes and true nocturnals. 
In one case they flew between cells of 
a cloudburst so violent that it inun- 
dated railroad tracks, washed out high- 
way bridges and put whole ranching 
communities under water. The Air 
Force weather station at Lowry Field 
measured 3.10 inches of rainfall in 50 
minutes. The C-band radar, effectively 
penetrating this cloudburst, enabled the 
crew to follow a smooth corridor. 

In 31 flights operated by “Sir Echo” 
in actual storm conditions, no instance 
of heavy turbulence was encountered 
unexpectedly and no case of hailstones 
of damaging size was experienced with- 
out prior warning from the C-band 
radar. 

In current operations, the airlines 
have a policy of avoiding areas of 
heavy turbulence and hail. Under their 
flight plans, they use any one of a num- 
ber of alternate routes to bypass such 
areas. With airborne radar, Cunning- 
ham said, it not only will be possible 
but entirely practicable to follow 
smooth corridors through these storms, 
avoiding the hard cores which will be 
plainly visible on the radar scope. 


Conclusions Enumerated 
United’s evaluation team, in enumer- 
ating its conclusions regarding 5.5 cen- 
timeter (C-band) radar, included the 
following: 


» C-band radar is a useful device for 
safer, smoother navigation of thunder- 
storm and precipitation areas. It will 
permit a pilot to avoid moderate and 
heavier turbulence in these areas, usu- 
ally by detours of five miles or less from 
the planned flight path. 

» C-band radar will penetrate 15 
miles or more of heavy rain equal to 
or greater than 60 mm/hour and will 
not lead a pilot into the hard core of a 
storm. 


» It provides a satisfactory warning 
of hail shafts. 


Tue Ar LINE PILoT 








» 


denc 
to av 
good 
edge 
any 
echo 
> 
mari 
biliti 
b 
tion 
E. 
tion< 
C-ba 
deto 
scan 
awa’ 
mild 
trati 
or n 
be e 
to s 
befo 
min¢ 
or oO) 


ae 
the 
C-b: 
extre 
ther 
ules 

U 
plac 
eval 
duct 
fact 
spril 


Oct 





> 


ed “Sir 
on team 
weather 
turnals, 
cells of 
it inun- 
ut high- 
anching 
‘he Air 
ry Field 
ll in 50 
fectively 
bled the 
or. 

r Echo” 
instance 
yuntered 
ailstones 
2d with- 
C-band 


airlines 
reas of 
ler their 
a num- 
ass such 
‘unning- 
possible 
follow 
- storms, 
will be 
pe. 
d 
enumer- 
5.5 cen- 


ded the 


“vice for 
hunder- 

It will 
ate and 
‘aS, USU- 
ess from 


rate 15 
qual to 
und will 
ore of a 


warning 


E PILOT 





» There is considerable indirect evi- 
dence that radar will permit the pilot 
to avoid tornadoes merely by exercising 
good judgment in detouring sharp- 
edged echos and in being suspicious of 
any fingerlike projections from such 
echos. 

» While the radar is intended pri- 
marily for weather mapping, its capa- 
bilities for terrain mapping are good. 

» Radar has little, if any, applica- 
tion in the avoidance of other aircraft. 

E. A. Post, superintendent of naviga- 
tional aids for United, points. out that 
C-band radar will permit a pilot to 
detour a storm area after having 
scanned it from over 75 miles or more 
away or to choose a corridor of the 
mildest activity or turbulence if pene- 
tration of the storm areas is desirable 
or necessary. He also says radar will 
be extremely useful in permitting pilots 
to scan the areas around an airport 
before taking off or landing to deter- 
mine the best possible flight path into 
or out of that airport. 


Installation Next Year 

“All in all,” say those who developed 
the program, “we are confident that 
C-band airborne radar will prove an 
extremely important factor in the fur- 
ther development of dependable sched- 
ules and maximum passenger comfort.” 

United has indicated that it will 
place orders for C-band radar after 
evaluation tests are completed on pro- 
duction models available from manu- 
facturers. Installation will start in the 
spring of 1955. 
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This is how C-band airborne radar is used to bypass thunderstorm turbulence. 
Airliner in upper sketch nears cloud formation which human eye sees as un- 
broken expanse. Photo of radar scope in cockpit shows same formation with 
storm cores clearly defined. To continue smooth flight ahead, pilot has choice 
of corridors indicated by dotted lines. 
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Pilot Immunity In Testimony 


A recent decision clarified the immunity pilots are accorded 
under the Civil Aeronautics Act in hearing testimony. 


Section 1004(i) of the Civil Aero- 
nautics Act provides as follows: 

“No person shall be excused .... 

The Legal Department of the Air 
Line Pilots Association in the repre- 
sentation of pilots who have been so 
unfortunate as to be involved in an 
incident, in which there exists the pos- 
sibility that they might be charged with 
violation of a Civil Air Regulation, has 
advised the precaution that the pilot 
seek whatever protection is afforded by 
this Section of the Act. 

It is understandable, as a mark of 
our time, that the pilots look askance 
at the procedure, and are reluctant to 
avail themselves of it; they erroneously 
theorize that to do so is at once, an 
admission of wrongdoing, and an effort 
to escape the consequences. 

We cannot regard it as wrongful to 
accept any protection which is legally 
afforded, nor do we feel that one can 
be criticized if’ he avails himself of a 
legal protection which our Congress, 
in its wisdom, has seen fit to provide. 


A Rightful Protection 

In any event, as the good advocate, 
we would be guilty of a serious omission 
if we failed to acquaint the pilot with 
all his rights and urge that he accept 
the Law’s protection. Those conflicting 
concepts have resulted in a unique situ- 
ation for the pilots involved in the 
“incident” here under discussion, as 
we shall see. 

Previous to August 2, 1954, when 
the Civil Aeronautics Board rendered 
its decision in CAB Docket SR-2168, 
much confusion existed respecting the 
application and the protection afforded 
by the Section, and while there still re- 
mains the possibility of further clarifica- 
tion resulting from some subsequent ju- 
dicial determination, since the SR-2168 
was not appealed to the courts, we are 
in a position to report to the member- 
ship the clarification which have re- 
sulted from this litigation. 


” 


Board's Decision 
The facts in the Case and the subse- 
quent procedures which gave rise to 
the single issue of “immunity” under 
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TEST CASE: The Michigan City mid-air collison provided a test 
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of pilot's right to claim his immunity in test:’ying before CAB. 


Section 1004(i) are recited 
Board’s Decision as follows: 


“The facts giving rise to these cases 
are not in dispute. Respondents are 
pilots. On August 26, 1953, one re- 
spondent was pilot-in-command and 
the other respondent was copilot, of a 
Convair aircraft which collided in mid- 
air near Michigan City, Indiana, with 
another Convair aircraft operated by 
American Airlines. Fortunately, no 
lives were lost. A formal Aircraft Acci- 
dent Inquiry followed, conducted by a 
duly qualified hearing officer of the 
Board. Respondents were subpenaed 
to appear and testify concerning the 
accident. Each claimed his privilege 
against self-incrimination. The pilots 
were directed to testify by the hearing 
officer, an action deemed by the Board 
to be within his competence, and each 
testified with respect to the midair col- 
liston. 

“Susequently, the Administrator filed 
complaints with the Board alleging in 
substance that respondents had failed 
to exercise sufficient vigilance to ob- 
serve the American aircraft and to 
avoid the collision, and had thereby 


in the 


operated the United aircraft in a care- 
less manner so as to endanger the life 
and property of others, in violation of 
Section 60.12 of the Civil Air Regula- 
tions. The complaints charge each pilot 
with failure to exercise the degree of 
care, caution and judgment required of 
him, and the Board is requested to 
suspend each pilot certificate in the 
public interest. 


“The pilots filed motions to dismiss, 
asserting inter alia that a suspension of 
their licenses would constitute a ‘penal- 
ty or forfeiture’ within the meaning of 
Section 1004(i), and that complete im- 
munity therefrom had been granted 
by the Section in that they had been 
compelled to testify concerning the col- 
lision in the accident investigation. We 
treat the motions to dismiss as pleas in 
bar to the imposition of any suspen- 
sion.” 

Affords Immunity 

The Board finds that oral testimony 
required of a respondent in an Accident 
Investigation Hearing falls within the 
purview of the subject Section and en- 
titles the respondent to whatever im- 
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muniy is afforded thereby; in the 
word: of the Board: 

“I (Section 1004(1)) does have ap- 
plica'ion to oral testimony compelled 
of in /ividual airmen and the oral testi- 
mony required of the respondents in 
the accident investigation is sufficiently 
related to the actions which form the 
basis of the instant proceedings to en- 
title them to whatever immunity the 
Section provides.” 


Extends to Penalties 

The Board finds further that the pro- 
tection afforded by the Subject Sec- 
tion extends to penalties imposed purely 
as a punishment with respect to the 
violation even though the action may 
be regarded, for all other purposes, as 
civil in nature; that a suspension or 
other sanction which may be imposed 
for purely “remedial purposes” is not 
so barred. The finding of the Board 
in this regard is stated: 

“We consider that a suspension of an 
airman certificate solely for the purpose 
of punishing the airman for violations 
of the Civil Air Regulations would 
constitute a penalty in the constitu- 
tional sense, and that Section 1004(i) 
has immunized the respondents against 
any suspension imposed purely as pun- 
ishment with respect to the violations 
here alleged. On the other hand, it is 
clear that a suspension or other sanc- 
tion imposed for remedial purposes is 
not barred by Section 1004(1), since 
the privilege against self-incrimination 
does not extend to remedial sanctions 
imposed in proceedings which are civil 
in nature.” 

Clarification 

To make this distinction abundantly 
clear, the Board in its Opinion points 
out that if a pilot is so lacking in qual- 
ifications as to make the revocation of 
his license necessary, the Board in the 
interest of safety could revoke his li- 
cense, even though he may have been 
compelled to testify under 1004 (i) in 
a proper proceeding. This clarification 
is stated: 

“The Board may revoke a pilot’s 
license in the interest of safety because 
he is unqualified, irrespective of wheth- 
er he has been compelled to testify 
under Section 1004(1). We think it 
plain that such a revocation would be 
remedial, and that the immunity con- 
ferred by Section 1004(i) would not 
extend to such an action. We think it 
equally plain that Section 1004(i) does 
not grant immunity from suspensions 
relating to pilot qualifications. For ex- 
emple, a pilot may be shown to be un- 
familiar with applicable regulations or 
operating procedures, or otherwise lack- 
ing in technical proficiency. He may 
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be suffering from temporary physical 
disability. Suspensions imposed until 
proficiency is achieved and demon- 
strated or disability removed obviously 
are remedial. We are of the opinion 
that such remedial suspensions may be 
imposed irrespective of whether the 
airman has been compelled to testify 
in that or any related proceeding.” 


Board Opinion on Penalties 

The Opinion states that the Board 
never imposes penalties in violation 
cases as punishment; that suspensions 
imposed in such cases are for the pur- 
pose of deterring further violations by 
the offending pilot and others. The 
Board holds nevertheless that for the 
purposes of Section 1004(i) no dis- 
tinction may be drawn between sus- 
pensions imposed merely to prevent 
and deter and those which might be 
imposed as a penalty, and that in each 
instance if the immunity as provided 
by Section 1004(i) is properly asked, 
it will be granted. In the language of 
the Board: 

“We are inclined to the view, and 


hold, that suspensions imposed merely - 


to prevent and deter violations, and 
where requalification in one or more 
respects is not involved, are punitive 


in the constitutional sense, and are a 
type of ‘penalty’ from which immunity 
is provided by Section 1004(i).” 

In deciding the Case upon the basis 
of its findings and determinations as 
above recited, the Board found that 
the complaint filed by the Administra- 
tor did not in terms allege the respond- 
ent to be unqualified in any respect, 
that a disciplinary suspension was 
sought, that the respondents had prop- 
erly claimed immunity under Section 
1004(i) and were entitled to the pro- 
tection afforded thereby; the complaint 
against them was dismissed accordingly. 


A Result 

At the Accident Inquiry Hearing, the 
Association represented the American 
pilots involved in the incident as well 
as the United pilots. The American 
pilots decided against claiming the pro- 
tection afforded by the subject Section. 
The unique situation brought about by 
the Board’s decision stems from the 
fact that the Administrator has brought 
exactly similar charges against these 
American pilots, and since they did not 
claim the protection afforded by Sec- 
tion 1004(i) they will presumably be 
required to meet the Administrator’s 
case on its merits. 











ODD HAZARDS: A 6 foot model plane ploughs into rudder 
of a parked airliner at Salina, Kansas, with the above results. 
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A Rational Performance Concept 


Performance is a safety component. The rational method measures that 
part dependent on aircraft's ability to accomplish desired trajectory. 


1. History. 

Man’s first step towards science was 
in learning how to measure. He meas- 
ured the performance of his bow by 
pacing the range of an arrow shot at 
the optimum trajectory. From that 
stage he has progressed somewhat until 
he now feels that he can attempt to 
apply methods of measurement to more 
abstract things. He feels that he can 
justifiably attempt to give an abstract 
but nevertheless reliable index to air 
safety, and to do this he has employed 
the latest theories of mathematical 
probability. There are possibly other 
ways in which air safety might have 
been measured, but it was agreed in- 
ternationally (at the Third Session of 
the ICAO Airworthiness Division, 
1949) that the most promising method 
was that provided by statistical analysis; 
and it is on this method that the ICAO 
Standing Committee on Performance 
(SCP) has gone ahead to develop, over 
a period of some two years, the “ra- 
tional method” of measuring aircraft 
performance. 

Since aircraft performance is an im- 
portant component of air safety, the 
rational method provides a means of 
measuring that part of air safety which 
is dependent upon the ability of the 
aircraft to comply with the desired 
trajectory; it is, in its first intent, no 
more than a modern method of meas- 
uring trajectory. 


2. PHILOSOPHY. 

Although the terms of reference of 
the SCP were first to measure air safety 
rather than to improve it, some degree 
of improvement has always been indi- 
rectly envisaged. The duty of the SCP 
was not only to measure air safety in 
each and every stage of flight, but to 
show how the degree of risk involved 
in one stage could be so controlled as 
to make it approximately equal to the 
degree of risk involved in another; this 
automatically entailed the concept of a 
uniform level of safety throughout the 
flight and by that alone safety should 
be increased, since the tendency must 
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always be to bring the weaker flight 
stage up to the level of the stronger. 
Similarly, the SCP has aimed at defin- 
ing the over-all risk of each flight, 
again with the object of ensuring that 
the level of risk in one flight is ap- 
proximately equal to the level in an- 
other. Once a uniform level of safety 
is agreed, it is possible to push it up 
or to bring it down according to the 
balance of forces existing between the 
ethical desire of a generation to con- 
serve its life and its practical desire to 
move about quickly. 


The exact balance has not yet been 
struck by the SCP; it has been left for 
fina’ decision at the plenary Air Navi- 
gation Conference due to take place in 
Montreal in the Autumn.* The SCP, 
however, has provided some guidance 
as to the limits between which the 
balance might swing so as to avoid, on 
the one hand, such safety that all flight 
becomes uneconomic, and on the other, 
such risk that all flight is unacceptable. 
These two absolute limits are them- 
selves not easy to establish, but it is 
possible, by taking as a reference line 
the existing level of safety, to determine 
a band between the two extremes 
which covers a casualty rate which is 
socially acceptable. This band has been 
determined by the SCP to range be- 
tween the level at which a critical flight 
would have a “casualty risk” of one in 
a million and the level at which that 
risk would be ten in a million. The 
basis on which the figures have been 
determined is given in paragraph 9 (see 
page 12.) 

3. AN IncwenT, INcwENT Rate, IN- 

CIDENT PROBABILITY. 

The word “casualty” used above is 
intended to carry the military signifi- 
cance of “not being present after an 
operation, but not necessarily being 
wounded or dead.” Similarly, in the 
language of the SCP, the term “inci- 
dent” is used to denote “absence of 
required performance during a flight 
operation” ; it does not imply a positive 
accident. From now on it is proposed 
to use the word “incident” rather than 


“casuality.” 

By way of example, a flight incident 
is said to occur if the scheduled mini- 
mum safe flight level over a particular 
sector is 15,000 ft., but due to poor 
performance on the day in question, 
the aircraft can achieve only 14,000 ft. 
There is 1,000 ft. “absence of required 
performance,” but not necessarily an 
accident. Whether or not there is an 
accident depends on the terrain and the 
accuracy of the navigation at the time. 

It is important to distinguish between 
“incident rate” and “incident probabil- 
ity.” The expression “incident rate” 
would imply (assuming the acceptable 
figure to be one incident per 1,000,000 
flights undertaken) that after 999,999 
safe flights it would be permissible to 
take off on a flight on which it was 
certain that an incident would occur. 
However, the philosophy of the rational 
concept (see 2 above) demands that 
each flight must be as safe as the others; 
the one millionth flight must be as safe 
as the other 999,999—that is, it must 
carry an incident probability of one in 
a million, not an incident rate. That 
is why we must distinguish between 
incident probabilities and incident rates. 

The “design incident probability” is 
the (very small) probability accepted 
in the design of the aircraft that it will 
not have the required performance. 


4. Tue Datum. 

The datum is the flight path below 
which the aircraft should not, by rea- 
son of lack of performance, be brought 
except on the occasions allowed by the 
design incident probability. It consists 
usually of an obstacle clearance plus a 
small amount to allow for ability to 
manoeuvre. For example, on take-off 
the datum is an obstacle clearance at 
the end of the runway of 20 ft., which 
includes a certain amount for missing 
the obstacle and a smaller amount to 
allow for the height which might be 
lost due to the effect of small corrective 
turns. 


5. THE Marcin. 
The idea of a margin is simple 





*Now probably postponed till 1955. 
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enough. It is merely an allowance for 
the factors affecting aircraft perform- 
ance which it is difficult to provide for 
by varying the operational weight of 
the aircraft. Some variables affecting 
performance (e.g., temperature, humid- 
ity, wind component, atmospheric pres- 
sure, runway slope) can easily be al- 
lowed for when calculating the maxi- 
mum permissible take-off weight. They 
are not, therefore, included in the mar- 
gins. On the other hand, such factors 
as the variability of engine power, pro- 
peller efficiency, airframe drag, etc., 
cannot be easily allowed for on a day- 
to-day basis and so are dealt with by 
an over-all safety cushion or “margin,” 
built into every flight stage. 


The margin can be expressed in 
terms of the all engines operating, one- 
out, or two-out, performance (the 
value, of course, will differ according to 
which is chosen) and takes into ac- 
count the probability of these various 
conditions occurring. 
6. THE VARIABILITY OF PERFORMANCE. 

6.1—From paragraph 5 it will be 
clear that we need to know the way in 
which performance varies between 
nominally identical aeroplanes and 
from day to day on the same aeroplane 
(after correction for operational fac- 
tors such as weight, altitude and tem- 
perature). 

This has been assessed firstly by cal- 
culation, and secondly by tests. 

6.2—Assessment by calculation. 

The effect of individual variables, 
such as airframe drag, basic engine 
power, instrument errors, unintentional 
sideslip, etc., has been estimated, using 
test results where possible. The varia- 
tions from these individual sources are 
combined, and a total variation de- 
duced. 

6.3—Assessment by test. 

As a check on 6.2 the performance 
on aeroplanes is measured, and its vari- 
ability deduced. This is an important 
function, but not the only one, of the 
climb performance tests required for 
the renewal of a Certificate of Air- 
worthiness. 

6.4—The form which the variation 
takes. 

Figure 1 shows a typical set of test 
results. 

It will be seen that these results fit 
quite closely (considering that it is a 
limited sample) to a “normal fre- 
quency distribution curve” which is the 
distribution which would result from 
random variations about a target. Such 
a curve may be tall and narrow, if the 
variation is small, or low and flat, if 
the variation is large, but they all fol- 


' low the same basic formula, which has 


one very useful property which simpli- 
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fies their use enormously. This prop- 
erty is that the shape of the curve can 
be uniquely defined by its “standard 
deviation” and that, therefore, the 
probability of getting a performance of 
“t”? or more standard deviations below 
the mean can be immediately ascer- 
tained by reference to standard proba- 
bility tables, an extract from which is 
given in Appendix A. 

6.5—The normal frequency distribu- 
tion curve. 

The “normal curve” of Figure 1 is 
reproduced again on its own in Fig- 
ure 2. 


It will be noted that it is symmetrical 
about the mean and that, theoretically, 
it meets the base line (zero frequency) 
at infinity (i.e., off the page). In prac- 
tice, of course, it approaches the base 
line so closely after a short distance 
that it is not possible to draw the two 
lines separately. 

It will be seen from the table that 
the area under the curve to the left of 
line XX which marks the standard 
deviation is 0.159 of the whole area 
under the curve, i.e., about 16%. This 
means that when the mean perform- 
ance is 2.26% and the standard devia- 
tion is 0.35%, the chance of getting a 
performance as low, or lower than 
1.91% is about 16 in 100. Similarly, 
the probability of getting a perform- 
ance of 1.56% (2 standard deviations 
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below the mean) is 0.0227, i.e., about 
2 in 100. 


Conversely, let us suppose that we 
want the chance of having a gradient 
of less than 2.8% after deliberately 
stopping one engine to be not more 
than 1 in 1,000 (10-*), and that the 
standard deviation is still 0.35%. For 
a probability of 10-* (0.0010) we find 
that a margin of 3.09 standard devia- 
tions is required, i.e., the aeroplane 
must have a mean gradient of climb 
of [2.8+(3.090.35)]=3.88%. In 
terms of Figure 2 the aeroplane must 
be unloaded so that the curve moves 
across the page to a point at which its 
mean is equal to 3.88%. 


We are thus able, once the standard 
deviation is known, to derive a margin 
given the incident probability, and vice- 
versa, for a deliberately selected num- 
ber of engines operating. 

The effect that chance plays in se- 
lecting the number of engines operating 
must, however, be looked after in prac- 
tice: the way this is dealt with appears 
in the next paragraph. 

7. DETERMINATION OF INCIDENT PRos- 
ABILITY, GIVEN THE PERFORMANCE 
7.1—Numerical illustration. 

The total incident probability for a 
given stage of flight (e.g. take-off, en 
route, or landing) is the sum of the 
probabilities of having an incident in 
each of the cases which can arise. On 
a four-engined aircraft these are: all 
engines operating, three engines oper- 
ating, two engines operating, etc. 


i.e. 

Q=P,+P,+P,+P,+P, 
where, 

Q is the desired incident probability 

P, is the contribution, to the total 

risk, of the all engine operating 
case. 

P, is the contribution, to the total 

risk, of the one-engine-out case. 

P, is the contribution, to the total 

risk, of the two-engine-out case. 
etc. 

One can usually ignore P; and P, in 
performance requirements, since it is 
clear that the three-engines-out or four- 
engines-out cases occur so rarely that 
they contribute a neglible amount to 
the overall risk. 

Now each of these P’s is the product 
of two probabilities, namely p,, the 
probability of the case occurring at all, 
and pi, the probability, when the case 
has occurred, of the performance being 
below the datum value. 

7.1.1.—pe, the probability of the case 
occurring. 

Pe is fairly simple to calculate once 
the probability of an engine failing is 
known. Let us suppose that the aero- 
plane has four engines and that the 
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probability of a particular engine fail- 
ing is 1 in 4,000. 

There are four engines, so the total 
chance of having the one-engine-out 
case is 

oe ek : 
*X 4000 1,000 P* * °°: 


The chance of a particular pair of en- 


: cles , ae 
gines failing is (aay 
In four engines there are six different 
possible pairs, so the total probability 
of having the two-engine-out case is 

, 375 . 
6X (Zo00) =Toog000 Pe «+ (i 
The probability of having all engines 


operating is one minus the probability 
of having one or more engines out, i.e. 





1 375 — 
\—(<500 + 000,000 }=0.999625, 
say 0.999=p.o (iii) 

‘ One Engine 
“BAL 


Frequency 














- All Engines 
Operating Margin 


if two engines are inoperative 


si) me. So 
(™) 79,000,000 —P' 


if all engines are operating 


7.1.3—Q, the design incident prob- 
abil-ty. 

Multiplying the values of p, and p; 
obtained from paragraphs 7.1.1 and 
7.1.2, for use with the main formula 
of paragraph 7.1, we get: 








Increasing Gradient of Climb 


Figure Three 


It is of interest that the sort of 
mathematics used above was developed 
by the French author and mathema- 
tician Pascal in the 17th century, to 
assist his friend Chevalier de Mere in 
has gambling activities. 

7.1.2—p,; The probability, in the case 
considered, of the performance being 
below the datum value. 

This is obtained by finding the num- 
ber of standard deviations separating 
the datum from the mean performance 
with the number of engines operating 
which is being considered, and con- 
sulting probability tables, as explained 
in paragraph 6. 

For this example, let us assume that 
the probabilities of the performance 
being down to the datum value are 


(i) a 
"! 0,000 —P" 
if one engine is inoperative 
(ii) 9,848 
~" 10,000- "* 
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which is near enough or 10°. 


| 
100,000 
This is, incidentally, the design inci- 
dent probability at present aimed at in 
British certification. 

It is seen that the probability of an 
in-ident arises chiefly from having one 
engine out, and this in fact is the 
normal case. This is because:— 

(a) with all engines operating the per- 
formance rarely falls to a danger- 
ous level; and 

(b) with two engines inoperative, al- 
though the performance would al- 
most certainly be at a dangerous 
level, the chance of two engines 
failing is practically negligible— 
the combined result being a small 
contribution to the total risk. 


The case (ie., number of engines 
out) which clearly contributes the ma- 
jor portion of the risk—in this example 
the one out case—is known as the 







dominant case. (The two engines-out- 

case may be dominant in the en route 

requirement for long flights.) 
7.2—Pictorial illustration. 

The process described in 7.1 may be 
visualised with the aid of Figure 3, 
which illustrates diagrammatically the 
relationship of the three cases. 

In this Figure, normal curves of 
gradient of climb versus frequency of 
occurrence (for all-engines-operating, 
one-out, and two-out, respectively) are 
superimposed: each point on the heay- 
ily drawn envelope representing the 
total frequency of occurrence of a par- 
ticular level of performance, i.e., the 
sum of the frequencies contributed by 
the all-engines-operating, one-out, and 
two-out cases. 

The shaded area to the left of the 
line XX" is the probability of the per- 
formance being as low as, or lower 
than, the datum performance; i.e. be- 
low the pilot’s rock bottom minimum 
needs. 


“Av. Peformance 
All Engines Op. 


Dotum Performance 
v. Performances 
One Engine Out 
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Gradient of Climb % 
Figure Four 


It will be seen that the area under 
that part of the all-engines hump 
which is to the left of XX* is only a 
small part of the total area to the left 
of XX’. 

You will remember that in para- 
graph 7.1.3 the contribution of the all 
engines case was small. Similarly, al- 
though the two-engines-out hump 1 
nearly all to the left of XX, its whole 
area is small compared with the part 
of the one-engine-out hump to tLe left 
of XX'. This lines up with the small 
contribution of the two-out case shown 
in paragraph 7.1.3. 

It is also noticeab!e that the datum 
performance line passes through the 
“hump” of the dominant case. 

7.3—Quick methods of calculating 
incident probability. 

Where the humps are well separated 
and the contributions of the non-dom- 
inant cases are therefore small (as is 
usually the case), a fair idea of the 
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Figure Five 
probability can quickly be obtained by 
ignoring the non-dominant cases, 
ie. in this example, to assume that 
Q=Pi=P.XPis- 

Given the engine failure probability, 
the standard deviation of performance, 
the gap between the desired datum and 
the average performance, and a set of 
ordinary probability tables, this is a 
sum anyone can do, having read para- 
graph 6. 

A useful refinement to the above, 
which adds considerable accuracy for 
a very small increase in calculation, is 
when the one-out case is dominant, to 
put pjz=1l, which makes P,=pyo, 
which can be easily calculated. As be- 
fore, the all-engines case would be ig- 
nored, i.e. pio is assumed to be zero. 

These quick methods are, however, 
not suitable when there is considerable 
overlap between the humps (as when 
there are many engines), or when cer- 
tan other subtleties have to be con- 
sidered, as is the case in some require- 
ments. 

7.4—Stage incident probability and 
Flight incident probability. 

Except where two sub-stages are de- 
liberately balanced against each other 
(e.g. continued take-off and accelerate- 
stop), it is fairly safe to assume that 
only one stage is critical in a given 
flight. It can be shown that a stage does 
not have to be very un-critical before 
its contribution to the total risk can 
be neglected, just as the contribution 
of the non-dominant cases can be neg- 
lected in the simple climb example. 
(Note the special meaning which is 
attached to “case” as distinct from 
“stage.”’) 

8. DETERMINATION OF THE PERFORM- 
ANCE REQUIRED, FOR A GIVEN IN- 
CIDENT PROBABILITY. 
8.1—In paragraph 6 we dealt with 

the problem of assessing the risk asso- 
ciated with a given level of perform- 
ance. Let us now consider the inverse 
of this, namely “how much perform- 
ance margin do we need to hold the 
risk down to a given level?” 

Let us consider a simple requirement, 
say, the initial en-route climb for a 
four-engined aeroplane. 

8.2—Assumptions. 

First, let us choose our datum, say 
+0.5% gradient of climb, plus, for 
Manoeuvre performance, a steady 8 
deg. banked turn, which requires a 
further 0.15% gradient (there are also 
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sundry detailed conditions, e.g. height 
above the aerodrome of take-off, satis- 
factory engine cooling, etc., which it 
is not proposed to go into now): i.e. 
a total datum of +0.65% gradient of 
climb. 

Then, let us choose our incident 
probability, say 10°. 

Assuming a typical relationship 
(which can be calculated) between 
the all-engines-operating, one-out, and 
two-out performances, suitable standard 
deviations of performances (see para- 
graph 6.4) and an appropriate engine 
failure probability, an envelope curve 
similar to that in Figure 3 could be 
drawn, having the right shape but, as 
yet, no defined position relative to the 
datum performance. 

8.3—Determination of performance 
required. 

Our job now is by adjusting aero- 
plane weight to slide this curve (AAA 
on Figure 4) sideways, across the line 
XX (representing the datum perform- 
ance) to a position BBB where the 
area under the curve to the left of XX is 


1 
100,000 of the total area under the 


curve. 

If we knew the correct relationship 
for the particular aeroplane between 
the average performance with all en- 
gines operating, one-out, and two-out 
(which would imply testing in each 
configuration), we could then state the 
required performance either as an all- 
engines gradient of +-3.85%, or a one- 
out gradient of +1.15%, or a two-out 
gradient of —1.57%, the corresponding 
margin values being 3.2%, .5%, and 
—2.22% respectively (i.e. gradient less 
datum of +0.65% in each case). 

It is, however, inconvenient to test 
in all three configurations (with suffi- 
cient thoroughness to get the exact re- 
lationship) so the requirement is usu- 
ally specified, and the aeropiane tested, 
in the configuration of the dominant 
case. Since the contribution of risk 
from the non-dominant cases is small, 
the error due to not knowing the exact 
relationship is acceptably small. By 
contrast, it is important that the per- 
formance in the configuration of the 
dominant case be accurately estab- 
lished, and the proper emphasis be put 
on any special characteristics e.g. engine 
cooling, cr ease of control, which affect 
that case. 

The process described above of slid- 
ing the curve would be rather clumsy 
to carry out physically, so in practice 
the operation would be performed by 
calculation, i.e. by using the formula 
of paragraph 7, namely QO=P,+P,+P, 
=(PeXPpi) all operating + (peX<pi) 
one-out +(p.Xpi) two-out. 


’ 
Inserting the values we know, we get 


10°=( .999%Xp; (all-operating) } 


+ (900: (one-out ) ) 


375 
+( 1,000,000?! 


Since the three p,’s are related to 
each other through the performance 
relationship, this equation can be solved. 

8.4—Quick method. 

As in paragraph 7.3 it is possible 
(by ignoring the non-dominant cases) 
to save time without noticeable loss of 
accuracy. Thus, by making the reason- 
able approximation in the equation of 
8.3 that 


(two-out) ) 


Pio =0 
and pi2 =! 
we get P, =0 and P.=p,2 
and Q =P,+P, 
ie, 10“ (rap XP (all out) ) 
1,090 
315 
+7000,000 


or pj (one out) = 


10—.375 ) 
1,000,000 
>< 1,000—=0.009625 


Reference to Appendix A shows that 
for pi; to equal 0.00963 the mean per- 
formance (with an engine out) must 
lie at about 2.34 standard deviations 
above the datum. of .65% assumed in 
8.2. If the standard deviation is 0.35% 
gradient of climb, this margin must 
thus be 0.82%, and the total require- 
ment (margin and datum) must be 
82%+-.65%=1.47% say 1.5%. 

8.5—Common terms. 


The concepts of Datum and Margin 
have already been given (paragraphs 
4 and 5) but before leaving them, it 
is desirable to introduce three addi- 
tional terms used by the SCP with par- 
ticular connotations: — 

(1) Gross Performance is the per- 
formance of an aircraft as computed 
on the assumption that all the factors 
which might affect its ability to meet 
9% 





Two 


e% 


Design Incident Probobility 


Figure Six 


Pace 11 











a particular performance requirement 
have their average values. 

(2) Net Performance is the perform- 
ance of an aircraft when all the margin 
and any manoeuvre performance have 
been eaten up. 

(3) Manoeuvre Performance is the 
gradient of climb needed in straight 
flight, if the aeroplane is to be able to 
make a steady turn in level flight at a 
defined angle of bank, e.g. 8 deg. 

The relationship of these terms is 
illustrated in Figure 5. 

8.6—Gross performance. 

It will be apparent that one of the 
key assumptions in computing require- 
ments on this system is that the gross 
performance assumed in compiling the 
Flight Manual shall not be worse than 
the mean of the fleet averaged over 
the period of validity of the Flight 
Manual. This is another important 
reason for the performance tests called 
for by British Authorities as a condition 
of the renewal of certificates of air- 
worthiness (the first reason was given 
in paragraph 6.3). The third reason 
is to limit the tine for which a par- 
ticular aeroplane can be a “rogue” and 
remain undetected. These precautions 
are, of course, supplementary to the 
efforts made to adjust prototype test 
results to estimated “fleet average” 
conditions wherever necessary. 

9. THE SELECTION OF A TOLERABLE 

Desicn INCIDENT PROBABILITY. 

In paragraph 7.1.2 above we ar- 
ranged our margins so that the design 
incident probability came out at 10°. 
What is the significance of this figure? 
The human mind has difficulty in 
grasping the significance of numbers 
much above 1,000. it may, therefore, 
be worthwhile to use an analogy. 

It is the practice of water engineers 
in the United Kingdom to plan their 
reservoir supplies by utilising the theory 
of probability. They assume a normal 
distribution of rainfall over a period of 
years and aim at providing sufficient 
storage capacity so that a drought as 
long as the longest known drought is 
unlikely to occur except once in seven 
to ten years. This is clearly a com- 
paratively high risk. However, a 
drought is not necessarily calamitous— 
it may mean only that hosing the gar- 
den is forbidden—and therefore a high 
degree of risk is not necesgarily a serious 
degree. In mathematical, language, the 
datum has been selected tonservatively 
but the margin is narrow because it is 
based on the acceptance of a high in- 
cident probability. 

But we cannot afford, in the air, the 
risk of an incident once in every seven 
to ten flights. We have selected our 
probability to give an incident only 
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once in 100,000 flights. If the longest 
drought were 732 days (.2 years), this 
is 1/2,000 of the water engineer’s risk; 
or, conversely, if he applied the same 
standards as the aircraft designer, it 
would mean that one could not hose 
the garden approximately once in 5,000 
years. 

That is the sort of safety aimed at 
in the design of an aircraft—the tol- 
erable design incident probability. 

Why has this particular order of risk 
been considered acceptable in air trans- 
port? 

The probability of an incident may 
be influenced by many factors, but it 
is not difficult to see that the major 





Appendix A. 
Extracts From A TABLE OF NORMAL 
DISTRIBUTION 





66499 
t 





(Standard Probability of deviation 
Deviations) exceeding ‘‘t’? in one direction. 
1.00 159 
1.28 .100 107 
2.00 0227 
2.33 .0099 10-2 
2.4 0082 
3.09 .0010 10-* 
3.71 .0001 10-* 
4.26 .00001 10° 
4.75 .000001 10-* 
5.2 .0000001 10-7 





With acknoweldgements to the members of the 
ICAO Standing Committee on Performance and 
others who, in some 200 working papers, have 
laid the foundation stones of a new science—the 
science of air safety. 





influence is that of engine failure. This 
is shown clearly in formula just used 
for calculating the margin (paragraph 
8.4). 

In commercial air transportation we 
are not prepared to accept an incident 
every time an engine fails; for that 
reason single-engined aircraft are un- 
acceptable. But we are prepared to 
accept the failure of one engine of a 
twin engined aircraft, provided that 
it can maintain a safe flight path to 
a suitable aerodrome. On the other 
hand, we do not think that a twin 
engined aircraft should fly too far over 
the sea since, once it has lost the first 
engine, it becomes a single-engined air- 
craft and the possible loss of the second 
engine becomes important. In the case 
of a four engined aircraft, we expect 
it to cope comfortably on three engines, 


but we are prepared to accept, if it 
should lose a second engine, a very 
small margin of safety over that re. 
quired to gain a suitable aerodrome. 


From the above it will be seen that 
we have quite definite ideas on what 
is a reasonable risk—a tolerable design 
incident probability—and what is not. 
These ideas are capable of more or 
less accurate mathematical expression. 
This is shown by the graph given in 
Figure 6, but before studying this it 
may be appropriate to recall the re. 
marks of Laplace (1820) :— 

**We see . . . that the theory of prob- 
abilities is at bottom only common 
sense reduced to calculations; it 
makes us appreciate with exactitude 
what reasonable minds feel by a sort 
of instinct, often without being able 
to account for it... 

It is remarkable that (this) science, 

which originated in the considera- 

tion of games of chance, should have 
become the most important object 
of human knowledge.” 

In the graph of Figure 6 it will be 
seen that (assuming a datum of “level 
flight”) to increase the ability of the 
aircraft to climb with all engines op- 
erating from 1% to 2.5% has very 
little effect on the incident probability, 
which remains within the 1/100 and 
1/1,000 bracket; however, by increas- 
ing the climb gradient from 2.5% to 
3.5% the incident probability comes 
down to 1/100,000—i.e., a hundredfold 
decrease of risk (increase of safety). 
The reason for this is that at an all 
engines climb gradient of 3.5% the 
aircraft has sufficient “climbability” in 
hand to be able to cope after failure 
of an engine. 

After the 3.5% gradient is reached 
(where the aircraft can cope with one 
engine inoperative) there is again a 
period during which any increase in 
the gradient will have very little effect 
in increasing safety; this period lasts 
till a gradient of 7% is reached, at 
which point the aircraft can still cope 
even after the loss of two engines and 
the incident probability is reduced fur 
ther to 1 per million or less. 

From this will be seen that the choice 
of an acceptable design incident prob- 
ability must, for economic reasons, be 
made so that the corresponding climb 
margin is as low as possible, provided 
that the aircraft maintains the per 
formance necessary for it to compl 
with the requirements stated at the 
beginning of this section. That & 
ideally, the design incident probability 
will be that corresponding to the bot 
tom of one of the steps in the graph- 
e.g. point A or B. There is no advat- 
tage in asking for a slightly hight 
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climb gradient, since, as we have seen, 
this does not result in any appreciable 
increase in safety—at any rate until the 
stage is reached at which the aircraft 
would climb after losing a further en- 
gine. All that would be achieved would 
be a decrease in payload with no cor- 
responding increase in safety. So, in 
ractice, the choice of an incident 
probability has centered on the section 
of the graph which lies between the 
climb gradient which would easily take 
care, at the one extreme, of the one- 
engine-out case and, at the other ex- 
treme, just take care of the two-engine- 
out case—i.e., the section BC. It will 
be seen that this corresponds to a de- 
sign incident probability of between 
1/100,000 and 1/1,000,000 (10° and 
10°°). 

10. ENGINEERING IMPLICATIONS. 

It has been shown in paragraph 9 
how important are the assumptions 
made with regard to engine failure 
rate. In this field there has been con- 
siderable controversy, but, if a perform- 
ance code is to mean anything in rela- 
tion to air safety, it must be a code 
which exerts its influence not only dur- 
ing the certification tests of the pro- 
totype but an influence continuing 
throughout fleet operations. There is 
thus an obligation to relate the engi- 
neering approach (which attempts to 
provide reliability) with the perform- 
ance approach, which must assume 
some definite standard of reliability. 

This focus on reliability, which is 
provided by the rational approach, is 
not restricted to the engine failure 
rate: its implications may extend to 
many less obvious fields, such as the 
provision of essential services after en- 
gine failure, the reliability of brakes, 
the ease of touching down in emer- 
gency at speeds higher than normal, the 
evaluation of runway slipperiness. Thus 
its value is not to be measured merely 
in the elimination of weak spots in the 
performance spectrum, but in the 
pointers which it gives to efficient de- 
sign in the sense of obtaining maximum 
payload and minimum field lengths 
without prejudice to an adequate, de- 
. and clearly understood, level 
of safety. 


—_ 
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* 
Convention 
The ALPA Convention will be 
held at the Shoreland Hotel, Chi- 
cago, November 8-13. The Banquet 
will be held the evening of Thurs- 
day, November 11. 

















Bert Acosta Is Dead 


By Paul Harvey 
NBC News Analyst 


How you want to remember him is up to you. 

I could remember him being showered with confetti and 
ticker-tape in a hero’s parade down Broadway in 1927... 
Or I could remember him sick and broke and hinting for 

a handout on a Chicago street three years ago. 

Bert Acosta was flying when he was fourteen. 

His first airplane he made with his bare hands. 

In his teens! 

He was a flight instructor in World War One. 

Flew the Mail. 

Set a speed record in 1921, then an endurance mark. 

Flew the Atlantic one month after Lindbergh . . . almost. 
He swam ashore in France. 

And then that triumphal return to New York and the big parade 
down Broadway. 

But Bert’s insatiable hunger for speed finally threw him off 
balance. 

And things began to go sour. 

Lost his pilot’s license for stunting. Lost his wife. 

Abandoned his second wife and their two children. And for a 
while he was in and out of jail for desertion. 

Bert Acosta went to Spain to fly for the Loyalists, but not for 
long. 

Came back . .. and dropped out of sight... 

Until some of us saw him that day in Chicago. I was writing 
for Flying Magazine and Bert wanted to know couldn’t he sell 
his story for the price of a few meals. 

Some of us who remembered saw that he got the few meals but 
we didn’t want to tell his story... 

We didn’t want to wipe away the exciting legend the great 
Acosta had written across the sky. 

But then two years ago he collapsed on a New York street... 
Penniless . . . ravaged by tuberculosis . . . and with cancer 
coming on. 

There’s a Jewish Consumptive Relief Society Sanitarium 
outside Denver ... and they sent him there. 

And that’s where the end came late yesterday. 


So how do you want to remember Bert Acosta .. .? 


The boy building an airplane in a barn . 

The hero ... hailed on two continents... 

Or the emaciated sixty-year-old has-been who begged on 

the street and died in a charity ward. 

Well, I'll tell you my choice . 

I’m going to remember ’em all. Because they were all part 

of the composite man who first gave us wings. 

If the Bert Acostas had been men of conservative mein and 
mild-mannered behavior patterns . . . the airship would -still 
be on the drawing boards. 

The very dashing, headlong, headstrong, adventurous spirit 

of such as he ... gave safer wings . . . to you and me. 

So don’t let history erase one line from the true story of 

Bert Acosta. 

For where most of us may plod the beaten paths ... ., these 
men must brave the dark and unknown forests on either side... 
and even try the sky. 

For the Bert Acostas ... are the reckless... frantic souls... 
who plunged in and pioneered the uncharted air ocean... 
while saner . . . lesser men . . . watched from the shore. 





Ocrozer, 1954 
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The Air Safety Challenge 


(Continued from Page 3) 
whether the man is manager, pilot, 
mechanic, builder or designer—com- 
placency has no place in his work. Yet 
the very fact that a good job ™ being 
done in accident prevention will tend 
to lull a man into this sense of com- 
placency. This is human, and to coun- 
teract it, we must approach the human 
aspects of the problem. 

Clashing Orders 

An example of the lack of awareness 
of the problem of flight safety may be 
cited where the management of an 
airline has issued one directive, order- 
ing employees to keep the matter of 
safety foremost in their minds; and at 
the same time issued what amounted 
to punitive regulations requiring on- 
time performance. 

The man at the end of the line— 
the pilot or mechanic, or the station 
manager—must know that safety is 
foremost, but he is under pressure to 
get the airplane out on time. What 
does he do under these circumstances? 

Sometimes what may seem like a 
minor consideration, such as the relo- 
cation of safety equipment in the air- 
plane, may be a key to greater safety. 
For instance, the shifting of life r¢fts 
nearer the door where they are more 
readily accessible for ditching. It is 
easy for management to say: “We 
have run this line for so many years 
without trouble, and we’re going to 





ARBITRATION 

Employer can’t change job con- 
tent without negotiating change with 
union. So ruled the arbitration 
board in the Nebraska Consolidated 
Mills case, 22 LA 785. Employer 
did not have right unilaterally to 
effect substantial change in content 
on one job by adding duties of an- 
other job which had been partly 
eliminated by technological improve- 
ments and certain new duties and 
responsibilities resulting from those 
technological improvements, despite 
fact that there is no specific con- 
tract provision requiring negotiation 
on changes in job content, since it 
is implied condition of contract that 
there will be reasonable stability in 
content of job classification. Em- 
ployer’s contention that action was 
incidental to technological changes 
and therefore fell within right re- 
served to management to introduce 
new production methods and facil- 
ities is rejected; rights of manage- 
ment do not include right to “oblit- 
erate classification boundaries.” 
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keep on doing it the way we have been 
doing it.” In one case that came to 
our attention, a minor official of an 
airline answered an airline pilot with 
the statement: 

“We haven’t had a crash in seven 
years, so why bother?” 


A Governing Factor 

Men down the line are naturally gov- 
erned by top management’s attitude. 
They have a sixth sense which recog- 
nizes the fine line of difference between 
what the boss says, and what he means. 
The beginning of flight safety must 
start at the top. Safety problems dealt 
with at the operating level can only 
be solved with the support of top man- 
agement. 

The increasing record of safety in the 
airlines indicates that this philosophy 
of top management generally prevails, 
but it must continue to grow until every 
source of complacency is rooted out. 

Where complacency or unawareness 
persists, accidents will occur. It is 
axiomatic that there would be no pre- 
ventable accidents if those who could 
prevent them knew they were going to 
happen. 

We do not know how many pre- 
ventable accidents occurred because of 
some hidden factor, which never 
reached the light of day because there 
was no place for the pilot or crewman 
to tell the story without the risk of 
prejudicing his carcer. 

A Tremendous Concern 

Probably no other industry has so 
many organizations interested in trying 
to promote its safety. There are fed- 
eral, state and municipal organizations. 
Organizations of private pilots, business 


pilots, airline pilots. Organizations of ' 


scheduled air transport operators, non- 
scheduled transport operators and air- 
craft manufacturers. All of these play 
a very important part in furthering the 
economic and technical progress of the 
particular segment of industry with 
which they are concerned. They are 
tremendously concerned with safety. 

However, none is completely inde- 
pendent. Each has its own interests to 
defend and protect. One might say 
that the federal agencies represent all 
phases of aviation. But the federal 
agencies, rightly or wrongly, are con- 
sidered prosecutor and judge. The con- 
flicting interests of all segments of avia- 
tion direct their safety contentions, 
often at odds one with the other at the 
federal agencies. The result is extreme 
caution to take action for fear of of- 
fending or causing trouble for one seg- 
ment or another. 





A Unique Position 

The Flight Safety Foundation and 
its Cornell-Guggenheim affiliate occupy 
a unique position in this welter of ac. 
tivity. Without duplicating the actiy- 
ities of any of these, it enjoys a freedom 
of action and independence of action 
which is denied an industry association 
or a governmental agency. It also is 
in a unique position to act across 
international boundaries so that safety 
lessons learned, say in Australia may be 
applied in Canada or the United States, 
Above all it enjoys the confidence not 
only of the executives but also of the 
pilot and the mechanic. 


When the idea of the Flight Safety 
Foundation was first introduced, the 
primary objection to such an organi- 
zation was that it might “talk at the 
wrong time”—perhaps disclose infor- 
mation about the cause of an accident, 
and cause planes to be grounded. One 
airline executive said in so many 
words: “We can’t support you, because 
you might knock our planes out of 
service.” And manufacturers who were 
approached for support told us: “Your 
organization might obsolete our equip- 
ment.” 


Integral Part of Industry 

The very objections raised to the 
formation of the Flight Safety Founda- 
tion and its sister organization spon- 
sored by Harry Guggenheim, are the 
best reasons for its existence—and the 
fact that it is a strong integral part of 
the aviation industry today is the best 
answer to the objections made at its 
inception. 

For example, there was a case of a 
pilot who had not flown a route for 
a considerable time. The weather was 
down to minimums. He had _ never 
flown with the co-pilot before and the 
co-pilot had never flown this route. 


He told the Flight Safety Founda- 
tion of this situation, and as a result, 
steps were taken by the airline to pre- 
vent any future assignment of pilots 
unless the pilot or co-pilot had flown 
the route recently. ‘Vhe pilot’s name 
was not disclosed, and nobody lost his 
job because preventive medicine was 
applied. 

Accidents Are Costly 

Accidents are expensive—not only to 
hurnan life, which is the primary cor 
sideration, but to the companies which 
fly airplanes, and to those who make 
them. 

There is no single segment of the im 
dustry that is competent to take cart 
of all interests involved in flight safety. 
That is why the Flight Safety Founda- 
tion was organized, and why it has con- 
tinued to grow and develop in spite 
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som of the early fears that it would 
“tal! out of turn.” 

It is the logical organization to ap- 
proavh the problem of flight safety 
with complete objectivity. It has no 
axe .o grind. It is part of the aviation 
industry—and the various segments of 
the industry participate in its activities. 
But .t is not dominated by any segment 
of the industry. And therein lies its 
greatest value to everyone who is in- 
terested in flight safety—and that 
means everyone. 

A New Area 

A whole new area of safety problems 
has arisen in a form which for a better 
name we shall call Sociological Rela- 
tionships. I do not use the term em- 
ployer-labor relations because it goes 
further than that. It includes relations 
between Captains and their crews, be- 
tween flight crews and ground crews, 
between traffic departments and main- 
tenance departments, between the pilots 
and the medical examiners, between 
pilots and management. 

The free expression of fact and opin- 
ion by flight crews involved in a near 
accident is inhibited because someone 
stands poised to pounce upon them. 
Pilots recently pleaded immunity in 
their defense after stating the events 
leading up to an accident, which led to 
action by the CAA. 

This has not been the fault of the 
pilots—although it is easy to assess the 
blame against them for lack of the 
moral courage to “stand up and be 
counted.” But there are a lot of people 
besides pilots who ought to “stand up 
and be counted.” 


Hope Isn't Enough 

If we are to face the challenge of 
flight safety, we have got to face it all 
the way. It isn’t enough merely to 
hope for the best. We’ve got to achieve 
the best that is humanly possible. The 
only antidote to this aspect is that a 
man must live with his conscience; 
some way must be found to provide a 
confidential outlet so that all the facts 
can be ascertained and constructive 
action may be taken without prejudice 
to the persons concerned. 

Safety procedures and safety gadgets 
are important to aviation. But safety 
attitudes are vital. I agree with Dr. 
Kenneth Andrews of the Harvard 
School of Business Administration that 
the good health of any organization 
lies in the development of proper at- 
titudes of loyalty as well as craftsman- 
ship. This does not occur unless the 
various members of the organization 
realize that they have a common goal 
which is just as much the objective of a 
mechanic as of the head of the airline. 

But this goal is a two-way proposi- 
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tion. Ideas and the free expression of 
opinion between p2ople in an organiza- 
tion must fiow freely, up as well as 
down. Morale cannot be high when 
large parts of an organization feel mis- 
understood. Good organizational health, 
which in turn would mean a reduction 
in safety problems, is best developed 
when everybody is at least willing to 
listen to everybody else. 

This, of course, is difficult when ani- 
mosities interfere with cockpit coopera- 
tion or when strife exists between mem- 
bers of different unions, for example. 
Here I offer for solution, inadequate 
as it may be: the force of public opin- 
ion, the public must be assured that 
safety is not being jeopardized by in- 
ternal differences and misunderstand- 
ings. 

Human Problems 

Another problem in human relations 
is the pilot’s relation to medical ex- 
aminers. There appear to be a number 
of ambiguities here that deserve ex- 
ploration. What is the relation between 
chronological age and physical age? 


Are the present medical criteria really - 


fitted to the job of flying, or are they 
based on old concepts that research 
would find inconsistent with actual 
practice—such as hearing? If a pilot 
can hear his radio and conversation in 
the cockpit above the noise of engines, 
what difference does it make to the 
proper fulfillment of his job if he can- 
not hear a whisper in a quiet room? 
Human problems also involve both 
the engineer and the designer. While 
some pilots and mechanics may not 
think so, engineers are human. The 
fascinating field of engineering the 
cockpit and maintenance to reduce 
complexity and stimulate efficiency is 
a science as yet strange to most en- 
gineers. It involves taking into account 
human capabilities and limitations both 
physiological and psychological. Engi- 
neering for human use! You see the 
lack of it in your cars when your wives 
must peer through the spokes of the 
wheel to read the speedometer. 
Hundreds of accidents have occurred 
in aviation and continue to occur be- 
cause a pilot pulls the lever for the 
undercarriage when he meant to pull 
the flaps. A vast amount of data exists 
that would help the engineer design for 
human use. But it is in terms that only 
a psychologist or a doctor can under- 
stand, and except for the work of the 
Cornell-Guggenheim Center, there is 
no constant prodding of the engineers 
to seek out what facts are already avail- 
able in a language he can understand. 
Management has a responsibility here. 
A few manufacturers have begun to 
apply the data in their designs, but 


much more remains to be done in this 
field of human engineering. 


Conclusions 
In a very brief sketch, I have tried 
to cover the essential elements of the 
“Challenge of Air Safety,” particularly 
as the challenge is directed toward hu- 
man factors and human nature, rather 
than technical aspects of safety. 


® The entire problem can be sum- 
marized in a single sentence, which is 
the creed of the Flight Safety Founda- 
ene Flight Safety is everybody’s busi- 
ness! 


® You cannot legislate safety, and 
you cannot enforce safety measures, by 


the application of legal persuasion 
alone. 


® You must have the force of moral 
conscience behind it. 


® You must have every man—from 
the manufacturer who makes airplanes 
and engines to the airline head who 
operates them—from the mechanic 
who tunes up the engines to the pilot 
who flies the plane—from the CAA 
official who checks on flying procedures 
to Mr. John Q. Public who merely 
rides in the airplane . . . all these are 
part of the team. 


© You may have the best engineer- 
ing, the best designing, the finest main- 
tenance and the most skillful pilots, 
but unless you have human team-work, 
the challenge of Flight Safety will not 
be adequately met. 


STATEMENT REQUIRED BY THE ACT 
OF AUGUST 24, 1912, AS AMENDED BY 
THE ACTS OF MARCH 3, 1933, AND JULY 
2, 1946 (Title 39, United States Code, Section 
233) SHOWING THE OWNERSHIP, MAN- 
AGEMENT, AND CIRCULATION OF 
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Editor, Ed Modes, 58th St. and Cicero Ave.; 
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one. 

2. The owner is: The Air Line Pilots 
Association, 55th St. and Cicero Ave.; Clar- 
ence N. Sayen, President; Jerome E. Wood, 
First Vice President; ‘ . Spencer, Sec- 
retary; Roger D. Rae, Treasurer, all of 55th 
St. and Cicero Ave. 

38. The known bondholders, mortgagees, 
and other security holders owning or holding 
1 per cent or more of total amount of bonds, 
mortgages, or other securities are: None. 

4. Paragraphs 2 and 38 include, in cases 
where the stockholders or security holder 
appears upon the books of the company as 
trustee or in any other fiduciary relation, 
the name of the person or corporation for 
whom such trustee is acting; also the state- 
ments in the two paragraphs show the af- 
fiant’s full knowledge and belief as to the 
circumstances and conditions under which 
stockholders and security holders who do 
not appear — the books of the company 
as trustees, hold stock and securities in a 
capecky other than that of a bona fide owner. 

. The average number of copies of each 
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Introducing... 


THE GLYCINE AIRMAN ie 


wiht 


$7 450 


Including Import Tax 
Since the inception >f commercial airlines, pilots and flight personnel have 
been searching for a watch DESIGNED FOR THEIR SPECIFIC NEEDS. Such 
a watch has been developed. It is aptly named the Glycine AIRMAN. The 
Uniform Shop, Inc., will be the se distributor in the United States. 


It indicates not one, but two independent ¥ The face of the AIRMAN is based on a 

times plus the date. 24-hour day. The outer movable ring may 
be had in either a 0-24 hour scale or a I-12 AM, 
1-12 PM scale. 

You automatically read company time and 

any local time or vice-versa. The AIRMAN has an automatic, self-winding 

23 JEWEL MOVEMENT. It has an unbreak- 

able mainspring, is shockproof, waterproof and 

The AIRMAN is a precision timepiece, built rustproof. The calendar feature is automatic. 

and guaranteed for a lifetime of service. The hands and figures are luminous and it has a 
sweep second hand. 


Order Before November |0th 





SPECIAL ORDER FORM 














SEND TO NEAREST OFFICE 
THE UNIFORM SHOP, INC. 


6013 S. Cicero Ave. 92-22 Astoria Blvd. 
Chicago 38, Ill. Jackson Heights, L. I., N. Y. 


Gentlemen: 

Pisase send me the Glycine AIRMAN watch. | enclose 
my check (or money order) for $58.50. | will pay the 
Mailman $13.00 upon delivery to cover the United States 
Import Duty. My name and address are indicated below 
EXACTLY the way | want them etched on the "Service- 
Pak" container. 


(Indicate Choice of Outer Dial by Checking One) 


C] 1-12 AM [] 0-24 Outer Dial 
1-12 PM, Outer Dial 


=a ee ee ee eee tC; 


For Christmas Delivery 


The Uniform Shop, Inc., has made arrangements with the 
Glycine Watch Co. to introduce this watch to the airline flight 
personnel in the United States. Your orders, when received by 
the Uniform Shop, Inc., are processed and sent to the Glycine 
Watch Factory in Bienne, Switzerland. Your Glycine AIRMAN is 
then shipped to you direct from Switzerland. Because this is a 
limited introductory offer, the Glycine AIRMAN can be purchased 
at a price that represents a tremendous saving. THIS OFFER VALID 
FOR LIMITED TIME ONLY. After this, the watch will be available 
only at the usual retail price of $175. YOUR COMPLETE COST 
IS ONLY $71.50. Payments are as follows: 


To Uniform Shop, Inc., with the Order Form. (This 
covers the cost of the AIRMAN plus Federal Excise 
Tax, Insurance and Airmail postage.).............. $58.50 


You pay Mailman on delivery: (To cover the 
United States Import Duty) 
Your total cost 
Use handy order form. 


DELIVERY TIME APPROXIMATELY 30 DAYS 
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